Re: Window code signing certificate source recommendations

2023-10-11 Thread Paul Dupuis via use-livecode
On 10/10/2023 9:56 AM, matthias rebbe via use-livecode wrote: Paul, just googled a little bit... If you have a safenet USB Token, than there seems to be a way to disable the password pop up. https://www.finalbuilder.com/resources/blogs/code-signing-with-usb-tokens Thank you for this! We

Re: Window code signing certificate source recommendations

2023-10-11 Thread Stephen Barncard via use-livecode
Programming is just not fun any more. Being creative is now just completely overwhelmed by ... whatever this is... just to get the thing on the air so people won't hack or steal. *Security* is a job we need AI to handle, not to replace our own creativity in the app itself. sqb -- Stephen

Re: Window code signing certificate source recommendations

2023-10-10 Thread matthias rebbe via use-livecode
Paul, just googled a little bit... If you have a safenet USB Token, than there seems to be a way to disable the password pop up. https://www.finalbuilder.com/resources/blogs/code-signing-with-usb-tokens > Am 10.10.2023 um 15:05 schrieb Paul Dupuis via use-livecode > : > > On 10/10/2023 8:53

Re: Window code signing certificate source recommendations

2023-10-10 Thread Paul Dupuis via use-livecode
On 10/10/2023 8:53 AM, matthias rebbe via use-livecode wrote: Hello Paul, unfortunately this is the "new" standard. Since 1st June 2023 private keys has to be stored on a Token. https://www.sslpoint.com/new-private-key-storage-requirement-for-standard-code-signing-certificates/ There is no

Re: Window code signing certificate source recommendations

2023-10-10 Thread Paul Dupuis via use-livecode
On 10/10/2023 8:38 AM, Brian Milby via use-livecode wrote: While not directly applicable, you may be able script it similar to using a CAC. DOD uses Smart Cards for authentication and you can have command line tools use the card for authentication (runas /smartcard program). What happens is

Re: Window code signing certificate source recommendations

2023-10-10 Thread matthias rebbe via use-livecode
Hello Paul, unfortunately this is the "new" standard. Since 1st June 2023 private keys has to be stored on a Token. https://www.sslpoint.com/new-private-key-storage-requirement-for-standard-code-signing-certificates/ There is no way anymore to export a certificate for example to .pfx. And much

Re: Window code signing certificate source recommendations

2023-10-10 Thread Brian Milby via use-livecode
While not directly applicable, you may be able script it similar to using a CAC. DOD uses Smart Cards for authentication and you can have command line tools use the card for authentication (runas /smartcard program). What happens is that you get a pop up from the system to choose cert and

Window code signing certificate source recommendations

2023-10-10 Thread Paul Dupuis via use-livecode
To any with a recommendation: I have been getting my Windows Code Signing Certificates from Comodo. I have been able to get certs in file formats like .pfx or .p12 that allows me to code sign using a single command line with the password as part of the command. This lets me script code